Privacy

In short

• We only store what you need to make the monthly plan: your transactions, plans, goals and portfolio.
• We never ask for or store bank logins. Statements come in as files, which never leave your browser.
• There is no advertising, no analytics and no selling of data.
• You can export everything or delete your account at any time, on the Account page.

Who is responsible

[controller to be named] is responsible for processing the data in this app (the data controller). For any request about your data, write to [contact to be added].

What data we store

• Account: your email, the session data needed to sign you in and, if you add one, your profile photo (cropped and made smaller in your browser, visible only to you).
• Accounts and transactions: each account's name, type and balance, and for each transaction its date, description, amount and category.
• Plan: income, budgets, goals, recurring and yearly expenses, categorisation rules.
• Investments: assets, quantities, values, costs and targets.

The statement file is read in your browser. Only the transactions taken from it are sent; the file itself never reaches the server.

What we use it for

Only to show you the app: splitting your income, following the month, your goals and your portfolio. The legal basis is the performance of the service you ask for when you create the account. We don't use the data for advertising, we don't sell it and we don't share it with third parties other than the providers below, who process it on our behalf.

Where it is kept

• Supabase: database and authentication. Each user can only reach their own rows (Row Level Security).
• Vercel: hosting of the app. It handles the requests but doesn't store your financial data.

Cookies

We only use the session cookie, which is essential to keep you signed in, and a cookie that remembers the language you chose. There are no analytics or advertising cookies, so we don't ask for cookie consent.

How long

For as long as you have an account. When you delete it, the data is deleted from the database straight away. It may still exist in the provider's backups until they expire.

Your rights

• Access and portability: export all your data as JSON (and your transactions as CSV) on the Account page.
• Correction: you can correct any data directly in the app.
• Erasure: delete your account and all its data on the Account page.
• Complaint: you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).